This vulnerability affects the TOTOLINK AC1200 T8 router running firmware version 4.1.5cu.8611. It concerns an unspecified function related to the vsftpd configuration file (/etc/vsftpd.conf), resulting in a least privilege violation. The vulnerability can be triggered remotely and does not require user interaction. The CVSS 4.0 base score is 5.3, indicating medium severity. No official patch or remediation level has been provided by the vendor as of the publication date. The vulnerability state is published, and the exploit has been publicly disclosed but not observed in the wild.

Successful exploitation of this vulnerability could allow an attacker to perform actions beyond their intended privilege level on the affected device. This could potentially lead to unauthorized access or modification of system components related to the vsftpd service. However, the exact impact scope is not detailed beyond the least privilege violation. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been provided, users should monitor vendor communications for updates. Until a patch is available, restricting remote access to the affected device and limiting exposure of the vsftpd service may reduce risk.